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(57) Abstract 

In a method for providing a secure communication between two devices, a first device generates a random key (Ci) and transfers 
this key to a second device in a first message encrypted using a plublic key. The second device decrypts the first encrypted message by 
means of a corresponding secret key to obtain the random key (Ci) and this random key is used to encrypt and decrypt all transmissions 
between these devices. In a decoder for a pay TV system, comprising a conditional access module and a smart card, this method is applied 
to provide a secure communication between the control access module and the smart card and/or between the decoder and the conditional 
access module. 
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Method for providing a secure communication between two 
devices and application of this method 

The present invention relates to a method for provi- 
ding a secure communication between two devices, in particu- 
lar between devices used in a pay TV system. 

In a pay TV system each subscriber generally has 
a decoder for descrambling the source component signal, 
wherein said decoder comprises a conditional access module 
and a smart card for decrypting entitlement control messages 
and entitlement management messages. In order to prevent 
unauthorized operation of the decoder for descrambling a 
source component signal it is important to prevent switching 
between an authorized and an unauthorized smart card for 
example • 

The invention aims to provide a method of the above- 
mentioned type wherein the communication between two devi- 
ces, such as the control access module and the smart card or 
the decoder and the conditional access module, is arranged 
in such a manner that switching between authorized and 
unauthorized devices is not possible. 

According to the invention a method is provided, 
wherein a first device generates a random key (Ci) and 
transfers said key to a second device in a first message 
encrypted using a public key, wherein said second device 
decrypts the first encrypted message by means of a corre- 
sponding secret key to obtain said random key (Ci) , wherein 
said random key is used to encrypt and decrypt further 
transmissions between said devices. 

According to the invention this method can be applied 
in a decoder for a pay TV system, wherein said decoder 
comprises a conditional access module and a smart card, 
wherein said method is applied to provide a secure commu- 
ni -cation between the control access module and the smart 
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card or between the decoder and the conditional access module 
The invention further provides a decoder for a pay TV 
system, comprising a conditional access module and a smart 
card, said conditional access module comprising means for 
5 generating a random key (Ci) , means for encrypting said key 
in a first encrypted message using a public key encryption 
method, means for transfering said first encrypted message 
to the smart card, said smart card comprising means for 
receiving and decrypting said first encrypted message to 

10 obtain said random key, means for encrypting transmissions 

to the conditional access module under said random key, said • 
conditional access module having means to decrypt said 
transmissions received from the smart card. 

In a further embodiment of the invention, said 

15 decoder comprises a conditional access module and a smart 
card, wherein said decoder comprises means for generating a 
random key (Ci) , means for encrypting said key in a first 
encrypted message using a public key encryption method, 
means for transfering said first encrypted message to the 

20 conditional access module, said conditional access module 
comprising means. for receiving and decrypting said first 
encrypted message to obtain said random key, means for 
encrypting transmissions to the decoder under said random 
key, said decoder having means to decrypt said transmissions 

25 received from the conditional access module. 

The invention will be further explained by reference 
to the drawings in which an embodiment of the method of the 
invention is explained as applied in a decoder for a pay TV 
system. 

30 Fig. 1 shows a block diagram of an embodiment of the 

decoder according to the present invention. 

Fig. 2 shows a sequence of steps of an embodiment of 
the method of the invention. 

Referring to fig. 1 there is shown in a very schema- 
35 tical manner a block diagram of a decoder for a pay TV 

system, wherein digital information signals are scrambled 
using a control word in accordance with the Eurocrypt 
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standard for example. In this embodiment the decoder compri- 
ses a demodulator 1, a demultiplexer 2 and a decompression 
unit 3. The decoder further comprises a conditional access 
module or CAM 4 and a smart card 5 which can be inserted 
into a connection slot of the conditional access module 4, 
Further the decoder is provided with a microprocessor 6 for 
configuration and control purposes. 

The conditional access module 4 is provided with a 
descrambler unit 7 and a microprocessor 8 having a memory 9. 
The smart card 5 comprises a microprocessor 10 having a 
memory 11 . 

As the operation of the above-mentioned parts of the 
decoder is not a part of the present invention, this opera- 
tion will not be described in detail. Typically, the signal 
received by the demodulator 1 is a modulated data stream 
between 950 MHz and 2050 MHz. The output of the demodulator 
1 is a scrambled digital data stream which is provided to 
the CAM 4 and the descrambler 7 will be allowed to descram- 
ble this scrambled data stream assuming that an authorized 
smart card has been inserted and the subscriber is entitled 
to receive the program. The descrambled data stream is 
demultiplexed by the demultiplexer 2 and decompressed and 
converted into the original analogue audio and video signal 
by the decompression unit 3. 

In a pay TV system the control word required for 
descrarabling, is transferred to the subscribers in so-called 
entitlement control messages containing the control word 
encrypted using a service key. This service key is down- 
loaded in the memory 11 of the smart card 5 by means of 
a so-called entitlement management message for example. 
During operation the CAM 4 transfers the entitlement control 
messages towards the microprocessor 10 of the smart card 5 
so that the microprocessor 10 can process the entitlement 
control message and extract the control word. Thereafter the 
smart card 5 returns the decrypted control word towards the 
CAM 4 so that the descrambler 7 is allowed to descramble the 
digital data stream received from the demodulator 1. 
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In order to prevent the use of an unauthorized smart 
card 5 in combination with the CAM 4 it is important to 
provide a secure communication between the CAM 4 and the 
smart card 5, According to the present invention the follo- 
5 wing method is used to provide such a secure communication. 
The steps of this method are shown in fig. 2. When a smart 
card is inserted into the decoder, the microprocessor 8 of 
the CAM 4 will generate two random numbers Ci and A. The 
microprocessor 8 will encrypt in a first message the random 

10 numbers Ci and A under a public key of the CAM 4 . The thus 
obtained first message is transferred to the smart card 5 
and the microprocessor 10 will decrypt this first message 
using the secret key of the CAM 4. Thereafter the micropro- 
cessor 10 will return a second message to the CAM 4, said 

15 second message being the random number A encrypted under the 
number Ci used as encryption key. The microprocessor 8 of 
the CAM 4 decrypts this second message and verifies whether 
the random number A is correct. Assuming that the random 
number A is indeed correct, so that it may be assumed that 

20 the inserted smart card 5 is an authorized smart card, the 
CAM 4 will then forward entitlement control messages contai- 
ning the encrypted control word to the smart card 5 which 
will process the entitlement control message and extract the 
control word in a conventional manner. However, in the 

25 return message towards the CAM 4, the smart card will 

forward the extracted control word encrypted under the key 
Ci and these encrypted control words are decrypted by the 
microprocessor 8 using the same key Ci . As soon as one tries 
to replace the inserted smart card 5 by an other smart card, 

30 for example by switching from the authorized smart card 5 to 
an unauthorized smart card, the CAM 4 will immediately 
establish such change as the key Ci will not be known to the 
new smart card, so that the CAM will no longer be able to 
descramble the return messages containing the control word. 

35 Thereby the descrambler unit 7 will be disabled. 

The method described can be used in the same manner 
for providing a secure communication between the CAM 4 and 
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the decoder, wherein the same protocol. as shown in fig, 2 is 
followed. 

In summary it will be understood that if a new CAM 4 
is connected to the other decoder parts, the microprocessor 
5 6 of the decoder will generate the two random numbers Ci and 
A and as soon as the microprocessor 6 has decrypted the 
second message received from the microprocessor 8 of the CAM 
4, and has verified that the random number A is correct, the 
key Ci will be used in all transmissions between the CAM 4 

10 and the microprocessor 6. 

The invention is not restricted to the above-descri- 
bed embodiments which can be varied in a number of ways 
within the scope of the claims. As an example for a further 
embodiment the CAM (i.e. the descrambler) may be part of the 

15 decoder. The decoder would now challenge the smart card to 
authenticate itself to obtain a secure communication between 
the smart card and the decoder. 
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CLAIMS 

1. Method for providing a secure communication 
between two devices, wherein a first device generates a 
random key (Ci) and transfers said key to a second device in 
a first message encrypted using a public key, wherein said 

5 second device decrypts the first encrypted message by means 
of a corresponding secret key to obtain said random key 
(Ci) , wherein said random key is used to encrypt and decrypt 
transmissions between said devices. 

2. Method according to claim 1, wherein after decryp- 
10 ting said encrypted message, said second device first 

returns said random key (Ci) in a second encrypted message 
with an authentication to said first device. 

3. Method according to claim 2, wherein for providing 
said authentication said first device further generates a 

15 random number (A) and transfers this random number (A) 

together with said random key (Ci) in said first encrypted 
message to the second device, wherein the second device uses 
said random number (A) for authentication in the second 
encrypted message. 

20 4. Method according to claim 3, wherein said second 

device encrypts said random number (A) under said random key 
(Ci) to obtain said second encrypted message. 

5. Application of the method of anyone of the prece- 
ding claims in a decoder for a pay TV system, wherein said 

25 decoder comprises a conditional access module (CAM) and a 

smart card (SC) , wherein said method is applied to provide a 
secure communication between the control access module and 
the smart card. 

6. Application of the method of anyone of claims 1-4 
30 in a decoder for a pay TV system, wherein said decoder 

comprises a conditional access module (CAM) and a smart card 
(SC) , wherein said method is applied to provide a secure 
communication between the decoder and the conditional access 
module . 
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7. Decoder for a pay TV system, comprising a conditi- 
onal access module and a smart card, said conditional access 
module comprising means for generating a random key (Ci) , 
means for encrypting said key in a first encrypted message 

5 using a public key encryption method, means for transfering 
said first encrypted message to the smart card, said smart 
card comprising means for receiving and decrypting said 
first encrypted message to obtain said random key, means for 
encrypting transmissions to the conditional access module 
10 under said random key, said conditional access module having 
means to decrypt said transmissions received from the smart 
card, 

8. Decoder according to claim 7, wherein said smart 
card comprises means for returning said random key to the 

15 conditional access module in a second encrypted message with 
an authentication. 

9. Decoder according to claim 8, wherein said genera- 
ting means of the conditional access module further genera- 
tes a random number which is included in said first encryp- 

20 ted message, wherein the smart card is adapted to use said 
random number as authentication in the second encrypted 
message. 

10. Decoder for a pay TV system, comprising a condi- 
tional access module, and a smart card, wherein said decoder 

25 comprises means for generating a random key (Ci) , means for 
encrypting said key in a first encrypted message using a 
public key encryption method, means for transfering said 
first encrypted message to the conditional access module, 
said conditional access module comprising means for recei- 

30 ving and decrypting said first encrypted message to obtain 
said random key, means for encrypting transmissions to the 
decoder under said random key, said decoder having means to 
decrypt said transmissions received from the conditional 
access module. 

35 11. Decoder according to claim 10, wherein said 

conditional access module comprises means for returning said 
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random key to the decoder in a second encrypted message with 
an authentication. 

12. Decoder according to claim 11, wherein said 
generating means of the decoder further generates a random 
number which is included in said first encrypted message, 
wherein the conditional access module is adapted to use said 
random number as authentication in the second encrypted 
message . 



wo 97/38530 



1/2 



PCT/EP97/01557 




wo 97/38530 



2/2 



PCT/EP97/01557 




INTERNATIONAL SEARCH REPORT 



IntenunonAl Appbca&on No 

PCT/EP 97/01557 



A. CLASSIFICATION OF SUBJECT MATTER 

IPC 6 H04N7/16 H04N7/167 



According to Intetnationai Patent Qasaficalion (IPC) or to both nattonal dainficnion and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched (dassiOcaiion system followed by ctassil'icabon symbols) 

IPC 6 H04N 



Documentation searched other than minimum documentation to the extent that such documents are mcluded in the fields searched 



Electronic daU base consulted during the international search (name of data base and, where practical, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category ' Ctution of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



EP 0 658 054 A (NEWS DATACOM LTD) 14 June 
1995 

see column 1, line 37 - column 4, line 31 

IEEE TRANSACTIONS ON CONSUMER ELECTRONICS. 

vol. 35, no. 3, 1 August 1989, 

pages 454-468, XP0OOD65971 

COUTROT F ET AL: "A SINGLE CONDITIONAL 

ACCESS SYSTEM FOR SATELLITE-CABLE AND 

TERRESTRIAL TV" 

see the whole document 

EP 0 428 252 A (NEWS DATA SECURITY 
PRODUCTS LT) 22 May 1991 
see the whole document 



1-12 



1-12 



1-12 



□1 



Further documents an hsted m the continuaticm of box C. 



m 



Patent family members are listed in annex. 



* Speaal categories of dted documents : 

*A* doctonent definmg the general state of the art which is not 

considered to be of particular relevaAce 
'E' earlier document but publi.thed on or after the international 

filing date 

'L' doctonent which may throw doubts on priority claim(s) or 
whidh is dted to establish the publication date of another 
citation or other special reason (as specified) 

'O' document referring to an oral disdasure, use, exhibition or 
other means 

'P' document publidied prior to the intemationd filmg date but 
later than the pnority date claimed 



'T" later document puhlidt^l after the mtemational filing date 
or pnority date and not m conflict with the application but 
dted to understand the pnnaple or theory underiying the 
mvention 

*X* document of particular relevance; the claimed invention 
cannot be conadered novd or cannot be considered to 
involve an inventive step when Che document is taken alone 

'Y' document of paracular relevance; the d aimed invention 
cannot be considered to involve an inventive step when the 
document is combined with one or more other such docu- 
mems, such combinabon being obvious to a pcnon ddlled 
in (he art. 

'A* document member of the same patent family 



Date of the actual completion of the mtemational search 



11 June 1997 



Date of mailing of the intematioruU search report 



- ^. 07. 97 



Name and maihng address of the ISA 

European Patent Office. P.8. 58 U Patentlaan 2 
NL • 22S0 HV Rijswijk 
Td. (-f 31-70) 340-2040. Tx. 31 651 cpo dt, 
Fax: ( + 31*70) 340-3016 



Authorized officer 



Greve» M 



Foim PCT.-ISA-310(iKon4 sheet) (July 1993) 



page 1 of 2 



INTERNATIONAL SEARCH REPORT 



inteniM^oiul Application No 

PCT/EP 97/01557 



C^ConOnuaoon) DOCUMKNTS CONSIDERED TO BE RELEVANT 



Category ' Citation of document, with indication, where appropnaie, of the relevant pasu^es 



Relevant to claim No. 



us 5 G29 207 A (GANMIE KEITH B) 2 July 
1991 

see abstract 



1.7.10 



Form PCT/ISA>'2I0 (fonllfitttUon ftf lecond ihMi) (Jwly l»M) 



page 2 of 2 



INTERNATIONAL SEARCH REPORT 


lnteri»«aonaJ Applicabon No 

PGT/EP 97/01557 


Patent documeni 
cited in search report. 


Publication 
date 


Patent family | Publication 
member(s) 1 dale 



EP 0658054 A 



14-06-95 



IL 
AU 
CA 
JP 
US 



107967 
8034294 
2137608 
7288522 
5590200 



15-06-95 
10-06-95 
31-10-95 
31-12-96 



EP 0428252 A 



22-05-91 



IL 
AU 
AU 
CA 
JP 
US 
US 



92310 
642157 
6230690 
2025585 
3210843 
5481609 
5282249 



30-05-94 

14- 10-93 
23-05-91 

15- 05-91 
13-09-91 
02-01-96 
25-01-94 



US 5029207 A 02-07-91 AU 635180 B 11-03-93 

AU 7340291 A 21-08-91 

CA 2049310 A 02-08-91 

EP 0466916 A 22-01-92 

JP 4506736 T 19-11-92 

WO 9111884 A 08-08-91 

US 5237610 A 17-08-93 



fam KT/ISA/IM (psUnt fmUy uan) ('"ly >nx> 



